$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft File: 32f4e84a-4abf-4422-8d26-57083e3e17cd.mft (raw, json) Hash identifier: fosSBSA89XfbUd05CZNme8QP3gyD2QKI/osY+9pE39I= Subject key identifier: FA:CF:1C:8D:88:02:AC:30:A1:CA:B3:D2:07:8D:74:16:F7:F0:90:85 Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 Certificate issuer: /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Certificate serial: 010D0C9F4328584D86B2C71668D8E42912E8DF52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft Manifest number: 010D0C9F43285847015292E43AF8658719E68665 Signing time: Thu 16 Apr 2026 14:00:03 +0000 Manifest this update: Thu 16 Apr 2026 14:00:03 +0000 Manifest next update: Sun 19 Apr 2026 14:00:00 +0000 Files and hashes: 1: 32f4e84a-4abf-4422-8d26-57083e3e17cd.crl (hash: 5qh4Pu8cGcx0QakplZZWkNyVBoWzTB2+Nq0+UEJMeeg=) 2: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (hash: U7IRhJt/M/DyW4xfCye0O/1QcQVAU/hBV8cm3FgvyVo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:b2:c7:16:68:d8:e4:29:12:e8:df:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Validity Not Before: Apr 16 14:00:03 2026 GMT Not After : Apr 19 14:00:00 2026 GMT Subject: CN=723a2865-1d9d-4813-ab46-16ed938e26c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8c:b8:b0:91:22:d0:29:cb:9d:c6:6a:c4:bc: d1:df:01:a8:15:df:9f:d5:76:f7:ce:d4:5e:52:12: 31:1b:14:7c:5a:3f:26:77:e1:8f:2a:59:13:8c:17: 44:1d:15:be:88:95:29:d6:0d:f5:8b:4a:50:ed:a0: e0:d6:70:77:bb:d2:22:6b:c0:7c:53:dc:14:71:bc: 81:00:4c:3f:22:7b:a8:89:03:d6:36:30:f3:cf:bf: fe:90:1a:e0:87:76:f6:06:09:49:a4:e5:62:28:a2: 8e:08:0b:e5:86:50:f7:dd:f1:9e:07:0b:d1:43:82: c6:26:c3:72:f3:55:cc:ad:6e:04:e8:83:1c:c8:28: 0d:9a:97:57:35:3b:eb:3e:14:56:63:dd:9b:c5:89: 83:41:aa:08:17:4c:72:85:78:52:ce:53:41:e8:3d: 30:0b:30:73:c6:e5:2c:97:b5:dc:ac:ba:59:00:f6: 48:0d:c9:96:40:84:86:a3:da:f0:4a:1a:77:8d:b8: 30:21:57:bc:77:c2:58:4b:61:38:67:2c:40:1b:c5: be:96:b5:8e:98:7b:17:bc:b0:7c:f3:c2:e3:e0:83: 43:24:24:cd:3b:c8:f8:c1:7c:ca:45:69:bd:a7:16: 76:68:b1:6e:73:dd:37:fc:38:e0:6a:26:8a:07:d1: 89:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CF:1C:8D:88:02:AC:30:A1:CA:B3:D2:07:8D:74:16:F7:F0:90:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl X509v3 Authority Key Identifier: keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a4:7f:f6:90:07:d8:f8:ca:ab:8c:32:99:4d:74:22:26:a3: 5b:a5:7c:79:06:39:2b:35:c4:38:57:b8:92:ab:d9:88:ff:21: 2e:18:65:74:56:a8:56:b4:9a:82:7e:2d:4e:95:7a:95:e1:a1: d6:71:a4:42:8f:29:e6:36:e4:ae:b1:e5:43:05:75:74:36:9b: ee:4f:a5:fc:96:d1:66:08:f9:77:90:02:fd:7c:2e:dc:71:e8: 0c:09:3d:2f:e7:85:f9:bd:54:e7:2f:69:0f:7f:e9:e5:8b:51: 31:88:f9:b8:5e:c5:b0:8f:46:f5:11:d9:eb:6b:48:ee:9a:98: b0:3e:30:17:f5:37:96:bf:f6:37:99:29:87:b5:ff:8d:c0:e9: 11:c0:08:64:23:ae:5e:7a:0d:41:b8:e1:d4:25:4d:57:30:88: a7:85:b2:69:d6:21:05:44:43:5b:77:ca:2f:ed:24:88:2b:5b: 26:6a:89:58:b1:e7:7f:6d:48:7b:11:e3:4b:e1:ff:c3:3f:4e: 61:9e:b0:28:61:56:ed:a7:01:19:46:d9:d5:ff:54:6e:9b:ca: 41:97:bf:c7:19:e0:16:79:32:c0:9f:9f:b1:17:d3:c4:35:93: dd:84:5b:1d:b2:39:09:6f:97:f2:63:27:6d:75:94:0b:4d:01: 5c:f6:43:63 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE2GsscWaNjkKRLo31IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmNGU4NGEtNGFiZi00NDIyLThkMjYtNTcwODNlM2Ux N2NkMB4XDTI2MDQxNjE0MDAwM1oXDTI2MDQxOTE0MDAwMFowLzEtMCsGA1UEAxMk NzIzYTI4NjUtMWQ5ZC00ODEzLWFiNDYtMTZlZDkzOGUyNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoy4sJEi0CnLncZqxLzR3wGoFd+f1Xb3ztRe UhIxGxR8Wj8md+GPKlkTjBdEHRW+iJUp1g31i0pQ7aDg1nB3u9Iia8B8U9wUcbyB AEw/InuoiQPWNjDzz7/+kBrgh3b2BglJpOViKKKOCAvlhlD33fGeBwvRQ4LGJsNy 81XMrW4E6IMcyCgNmpdXNTvrPhRWY92bxYmDQaoIF0xyhXhSzlNB6D0wCzBzxuUs l7XcrLpZAPZIDcmWQISGo9rwShp3jbgwIVe8d8JYS2E4ZyxAG8W+lrWOmHsXvLB8 88Lj4INDJCTNO8j4wXzKRWm9pxZ2aLFuc903/DjgaiaKB9GJ4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPrPHI2IAqwwocqz0geNdBb38JCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0 ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4M2UzZTE3Y2QvMzJmNGU4NGEtNGFiZi00 NDIyLThkMjYtNTcwODNlM2UxN2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJmNGU4NGEtNGFiZi00NDIyLThk MjYtNTcwODNlM2UxN2NkLzMyZjRlODRhLTRhYmYtNDQyMi04ZDI2LTU3MDgzZTNl MTdjZC5jcmwwHwYDVR0jBBgwFoAUW6uHkmFiU8gEFTo/2CsWSVihrqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4 M2UzZTE3Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJpH/2kAfY+MqrjDKZTXQi JqNbpXx5BjkrNcQ4V7iSq9mI/yEuGGV0VqhWtJqCfi1OlXqV4aHWcaRCjynmNuSu seVDBXV0NpvuT6X8ltFmCPl3kAL9fC7ccegMCT0v54X5vVTnL2kPf+nli1ExiPm4 XsWwj0b1Ednra0jumpiwPjAX9TeWv/Y3mSmHtf+NwOkRwAhkI65eeg1BuOHUJU1X MIinhbJp1iEFRENbd8ov7SSIK1smaolYsed/bUh7EeNL4f/DP05hnrAoYVbtpwEZ RtnV/1Rum8pBl7/HGeAWeTLAn5+xF9PENZPdhFsdsjkJb5fyYydtdZQLTQFc9kNj -----END CERTIFICATE-----Generated at Thu Apr 16 20:37:15 2026 by rpki-client